Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 02-13-2007, 04:22 PM   #1
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Rep: Reputation: 30
SSH and the changing ports it uses

Hi, I think I've figured this out, I'd just like some backup or affirmation here. (And yes, I did a search, just didn't find anything. That may have been because I didn't know the key words to look for). My /var/log/secure file has been showing ssh sessions at various times of the day, that in itself isn't that disconcerting since we've got more than 1 person that has to access it. The part that was kind of worrying was the fact that the port it was using was different each time. I think what is happening is that SSH is just either forwarding or using a different port for each connection. Is that the case? In testing that theory, I watched the log file (tail -f /var/log/secure) and proceeeded to log in via ssh 3 different times. The ports it used were 62274, 62275, 62276.

If anyone can affirm this as normal, that'd be great!
Old 02-13-2007, 04:50 PM   #2
Senior Member
Registered: Aug 2003
Location: Glasgow
Distribution: Fedora / Solaris
Posts: 3,109

Rep: Reputation: 96

Does the log look like:
Feb 11 21:20:01 cronus sshd[5030]: Accepted password for username from port 1911 ssh2

If so, it's normal. The port referred to (1911 in this case) is the remote side's port, which will be random, and outside the privileged port range.

Old 02-13-2007, 06:22 PM   #3
Registered: Dec 2005
Distribution: Slackware
Posts: 151

Original Poster
Rep: Reputation: 30
Yes, exactly! Thanks for affirming my theory.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
ssh on two ports mazzo Linux - Security 8 09-25-2004 11:05 PM
SSH and ports zowey Linux - Networking 4 07-19-2004 07:31 AM
changing ports on Zaius Linux - Newbie 2 01-15-2004 03:14 PM
ssh ports phishintrip Linux - Networking 2 07-02-2003 03:43 PM
Changing default ports for smoothwall lhiggins Linux - Newbie 9 04-24-2003 01:12 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 05:12 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration